75ba5da4836e5b018790f563c0c292367f579feb37c07742480285bfd45fc6c4 | Triage

Sharing

General

Target

75ba5da4836e5b018790f563c0c292367f579feb37c07742480285bfd45fc6c4N
Size

131KB
Sample

240928-bep2zayejq
MD5

d7721bcd76bca30cfdb61e716fd71910
SHA1

2265f8141db33b9f88676cd10975aac8c54af9cc
SHA256

75ba5da4836e5b018790f563c0c292367f579feb37c07742480285bfd45fc6c4
SHA512

198af8aaa958ca3041fb20d25d984891cd03fd7a83d2ddd23234688441bf0517bcb2ab868c97230b89a742137533965ba19d88d2fca46165d6690bfc84413dcd
SSDEEP

1536:2+psrz8GvnGRR8Bftg+9t/p4QAILJuCOPdvX/ZWOtnGWxlP:2H8alvgmJAIlwPxX/ZWOFrb

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  75ba5da4836e5b018790f563c0c292367f579feb37c07742480285bfd45fc6c4N
- Size
  
  131KB
- MD5
  
  d7721bcd76bca30cfdb61e716fd71910
- SHA1
  
  2265f8141db33b9f88676cd10975aac8c54af9cc
- SHA256
  
  75ba5da4836e5b018790f563c0c292367f579feb37c07742480285bfd45fc6c4
- SHA512
  
  198af8aaa958ca3041fb20d25d984891cd03fd7a83d2ddd23234688441bf0517bcb2ab868c97230b89a742137533965ba19d88d2fca46165d6690bfc84413dcd
- SSDEEP
  
  1536:2+psrz8GvnGRR8Bftg+9t/p4QAILJuCOPdvX/ZWOtnGWxlP:2H8alvgmJAIlwPxX/ZWOFrb
Score

7^/10

discovery spyware stealer
- Deletes itself
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer